[squid-users] Squid Websocket Issue

[Amos Jeffries]

On 17/12/2016 10:16 p.m., Hardik Dangar wrote:
> Here is some information about my squid version,
> 
> Squid Cache: Version 3.5.22-20161115-r14113
<snip>
> Now the issue is whenever someone requests a page which contains web socket
> requests response is always bad request.
> Here is an example,
> 
> Request URL:wss://w4.web.whatsapp.com/ws
> Request Method:GET
> Status Code:400 Bad Request
> 

Squid does not yet support using Upgrade for "websocket" protocol,


> Request Headers
> #################
> Connection:Upgrade
...
> Upgrade:websocket
...
> 
> My question is how we can work with web socket requests in squid or if not
> by pass them squid. My squid instance is in interception mode and requests
> are intercepted at instance via iptables and forwarded to squid using below
> rules,

You need to prevent these transactions from being bump'ed. If you want
that protocol to work they need to be splice'd by your ssl_bump rules.
How you determine which ones is a bit of a problem.

Amos